hqweb端

server/dukang-api/src/modules/iam/admin-auth.controller.ts

@@ -0,0 +1,28 @@
+import { Body, Controller, Get, Post, UseGuards } from '@nestjs/common';
+import { AuthService } from './auth.service';
+import { LoginSmsDto, SendSmsDto } from './dto/auth.dto';
+import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard';
+import { CurrentUser } from '../../common/decorators/current-user.decorator';
+import { AuthUser } from '../../common/guards/jwt-auth.guard';
+import { ClientApp } from '@dukang/shared-types';
+
+@Controller('admin/auth')
+export class AdminAuthController {
+  constructor(private readonly authService: AuthService) {}
+
+  @Post('sms/send')
+  sendSms(@Body() dto: SendSmsDto) {
+    return this.authService.sendSms(dto.phone, dto.scene);
+  }
+
+  @Post('login/sms')
+  login(@Body() dto: LoginSmsDto) {
+    return this.authService.loginHq(dto.phone, dto.code, ClientApp.HQ_WEB);
+  }
+
+  @Get('me')
+  @UseGuards(JwtAuthGuard)
+  me(@CurrentUser() user: AuthUser) {
+    return this.authService.getMe(user.actorType, user.actorId);
+  }
+}

server/dukang-api/src/modules/iam/auth.service.ts

@@ -227,6 +227,24 @@ export class AuthService {
     });
   }
 
+  async loginHq(phone: string, code: string, clientApp: ClientApp) {
+    await this.smsProvider.verify(phone, code, SmsScene.HQ_LOGIN);
+    const account = await this.prisma.hqAccount.findUnique({ where: { phone } });
+    if (!account) throw new BadRequestException('HQ账号不存在');
+    if (account.status !== 'ACTIVE') throw new BadRequestException('账号已停用');
+    await this.prisma.hqAccount.update({
+      where: { id: account.id },
+      data: { lastLoginAt: new Date() },
+    });
+    return this.issueToken('HQ', account.id, clientApp, false, undefined, undefined, undefined, undefined, {
+      id: account.id.toString(),
+      phone: account.phone,
+      name: account.name,
+      adminRole: account.adminRole,
+      status: account.status,
+    });
+  }
+
   async getMe(actorType: string, actorId: bigint) {
     if (actorType === 'USER') {
       const user = await this.assertActiveUser(actorId);
@@ -246,6 +264,10 @@ export class AuthService {
       });
       return serializeBigInt(account);
     }
+    if (actorType === 'HQ') {
+      const account = await this.prisma.hqAccount.findUnique({ where: { id: actorId } });
+      return serializeBigInt(account);
+    }
     return null;
   }
 
@@ -358,6 +380,7 @@ export class AuthService {
     store?: Record<string, unknown>,
     partner?: Record<string, unknown>,
     deviceKey?: string | null,
+    hq?: Record<string, unknown>,
   ) {
     const payload = {
       sub: actorId.toString(),
@@ -378,6 +401,7 @@ export class AuthService {
       user,
       store,
       partner,
+      hq,
     };
   }
 }

server/dukang-api/src/modules/iam/iam.module.ts

@@ -10,9 +10,11 @@ import {
 } from './auth.controller';
 import { UserAddressController } from './user-address.controller';
 import { UserAddressService } from './user-address.service';
+import { AdminAuthController } from './admin-auth.controller';
 import { JwtAuthGuard } from '../../common/guards/jwt-auth.guard';
 import { PhoneVerifiedGuard } from '../../common/guards/phone-verified.guard';
 import { OptionalJwtAuthGuard } from '../../common/guards/optional-jwt-auth.guard';
+import { HqAuthGuard } from '../../common/guards/hq-auth.guard';
 
 @Module({
   imports: [
@@ -28,8 +30,9 @@ import { OptionalJwtAuthGuard } from '../../common/guards/optional-jwt-auth.guar
     PartnerAuthController,
     UserProfileController,
     UserAddressController,
+    AdminAuthController,
   ],
-  providers: [AuthService, UserAddressService, JwtAuthGuard, PhoneVerifiedGuard, OptionalJwtAuthGuard],
-  exports: [AuthService, JwtModule, JwtAuthGuard, PhoneVerifiedGuard, OptionalJwtAuthGuard],
+  providers: [AuthService, UserAddressService, JwtAuthGuard, PhoneVerifiedGuard, OptionalJwtAuthGuard, HqAuthGuard],
+  exports: [AuthService, JwtModule, JwtAuthGuard, PhoneVerifiedGuard, OptionalJwtAuthGuard, HqAuthGuard],
 })
 export class IamModule {}